Re: Question on security..

From: Tim Clewlow <tim1timau_at_yahoo.com>
Date: Tue, 15 Jan 2008 09:32:57 -0800 (PST)
--- Richard Bates <bates_at_telehouse.com> wrote:

> I know login failures are logged in /var/log/auth.log
> 
> is there a way to log the login of users in this log
> say something like
> 
> Jan 15 10:59:00 MyServer sshd[91869]: User bates authenticated from  
> 172.18.1.139
> Jan 15 10:59:00 MyServer sshd[91869]: User bates Disconnected from  
> 172.18.1.139
> 
> ================================
> === Richard Bates
> === TELEHOUSE America
> ================================
> 

Hello, login successes are also logged in /var/log/auth.log - if you just want
to see the successful ssh logins, then do:

# cat /var/log/auth.log | grep -e "ssh.*Accept"

If you want to see a list of currently logged in users, then do:

# who

Cheers, Tim.


      ____________________________________________________________________________________
Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping
Received on Tue Jan 15 2008 - 16:59:39 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:39:26 UTC